
$ rpki-client -vvf rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft
File: GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft (raw, json)
Hash identifier: K36TQRWuxO0aUMBvAJvVu53o8NTID89YjFycWA/HEXo=
Subject key identifier: F5:01:E6:5B:A5:B6:5B:4F:33:17:D6:A3:5D:8E:D1:9E:A5:CD:46:AE
Authority key identifier: 1B:36:83:52:59:44:77:43:88:85:30:90:D1:00:5B:B5:15:52:24:6D
Certificate issuer: /CN=A91519CC/serialNumber=1B3683525944774388853090D1005BB51552246D
Certificate serial: 4E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft
Manifest number: 47
Signing time: Fri 17 Apr 2026 08:08:40 +0000
Manifest this update: Fri 17 Apr 2026 08:08:40 +0000
Manifest next update: Fri 24 Apr 2026 08:08:40 +0000
Files and hashes: 1: GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl (hash: iCBO/obu6vH1nDWjnWbbQ9oyLcmzGKulLhARIq2YgbQ=)
2: 9D232386DA5A11F08EBD209195D3641D.roa (hash: QOzthGopxBzd3k4toAQMU4imXtsyINBxu6ucmSP2zFQ=)
3: 9C9F0DC6DA5A11F08EBD209195D3641D.roa (hash: JgdmWI3k7cOqCcItbOe6xRBhm/7mwOzKG5iBpPWBzvY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl
rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91519CC, serialNumber=1B3683525944774388853090D1005BB51552246D
Validity
Not Before: Apr 17 08:08:40 2026 GMT
Not After : Apr 24 08:08:40 2026 GMT
Subject: CN=69e1ea88-8bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e5:79:a4:fd:ec:d6:03:51:62:18:28:ed:01:
6a:05:2b:c8:b6:d2:7f:ee:7a:d8:5f:9e:e8:35:1c:
cf:5f:e1:4a:95:10:c9:11:81:b6:fe:cc:2b:bb:3b:
60:3e:8e:da:4e:8a:f0:fd:3b:43:0b:c7:aa:9f:a1:
a4:3a:59:aa:28:6a:34:80:8a:b4:ae:d5:80:92:7e:
aa:be:91:3f:b2:3f:7b:18:23:ce:72:56:42:2c:a5:
78:4b:34:ab:d1:96:12:65:d3:ad:a4:7f:89:d0:55:
63:10:b5:04:70:7e:6f:68:b8:48:ef:95:19:6d:2e:
a8:3a:0f:53:ff:e1:c2:01:27:21:b3:31:5e:83:e7:
67:e6:bf:92:2d:27:82:fe:1d:dd:31:c5:87:bf:22:
91:2a:0d:55:92:32:d6:e5:e4:5b:ea:c0:df:a5:47:
c2:7e:3e:53:82:65:ed:81:b8:28:2f:6a:01:2f:71:
2c:e2:c9:99:1f:e8:58:42:c3:e4:9d:88:2b:dd:08:
69:89:ef:97:5d:8e:8a:76:a2:b7:e7:98:36:c8:fb:
b6:21:b0:e0:42:11:9e:83:19:70:4c:d8:16:41:68:
51:ed:c7:4c:b7:b1:a6:00:5b:81:ba:d6:70:c9:1c:
a8:e6:28:57:1d:c2:ea:6b:4e:a0:be:f9:5b:45:c5:
60:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:01:E6:5B:A5:B6:5B:4F:33:17:D6:A3:5D:8E:D1:9E:A5:CD:46:AE
X509v3 Authority Key Identifier:
keyid:1B:36:83:52:59:44:77:43:88:85:30:90:D1:00:5B:B5:15:52:24:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:28:fe:a7:bf:82:50:9c:69:78:40:56:a5:dd:99:3e:6e:87:
e0:9e:5e:2e:ef:4b:7b:f7:f9:b7:20:5a:3c:58:db:25:c1:ce:
13:4a:33:70:bf:de:15:63:72:f4:3b:fd:87:0e:73:85:4a:50:
e3:22:d1:09:22:f5:4d:91:57:8f:ca:fe:d6:af:bc:7a:48:e0:
40:0f:ff:93:c1:5e:dd:a1:b0:35:2b:81:fe:25:9d:12:34:83:
90:2c:70:0f:6e:8f:19:26:54:cd:8d:9e:3f:46:31:55:24:cf:
cd:92:a0:86:2e:7e:dc:5b:d7:53:75:0d:50:2d:c7:06:d6:e4:
70:cf:45:70:8a:4d:b6:ec:20:e0:97:f2:94:8a:63:41:7f:fd:
f5:61:c4:0d:55:7f:02:c3:e8:93:6c:39:bc:7e:f1:45:7f:57:
11:89:21:1c:aa:23:c8:bb:27:04:7e:aa:e2:4a:f6:82:c6:4f:
e6:89:df:43:9d:d3:db:22:33:88:ec:07:35:34:1a:47:89:29:
d8:1e:a1:84:60:64:b4:d3:c3:0f:1b:f7:8c:75:2e:dd:9f:29:
79:6a:35:ea:20:62:27:6c:0c:a0:ff:b3:de:e1:cc:ef:f1:0b:
db:e7:de:34:ea:2b:47:b7:b6:1d:51:01:15:0a:9a:de:ba:46:
82:49:00:ef
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
MTlDQzExMC8GA1UEBRMoMUIzNjgzNTI1OTQ0Nzc0Mzg4ODUzMDkwRDEwMDVCQjUx
NTUyMjQ2RDAeFw0yNjA0MTcwODA4NDBaFw0yNjA0MjQwODA4NDBaMBgxFjAUBgNV
BAMTDTY5ZTFlYTg4LThiYzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCc5Xmk/ezWA1FiGCjtAWoFK8i20n/uethfnug1HM9f4UqVEMkRgbb+zCu7O2A+
jtpOivD9O0MLx6qfoaQ6WaooajSAirSu1YCSfqq+kT+yP3sYI85yVkIspXhLNKvR
lhJl062kf4nQVWMQtQRwfm9ouEjvlRltLqg6D1P/4cIBJyGzMV6D52fmv5ItJ4L+
Hd0xxYe/IpEqDVWSMtbl5FvqwN+lR8J+PlOCZe2BuCgvagEvcSziyZkf6FhCw+Sd
iCvdCGmJ75ddjop2orfnmDbI+7YhsOBCEZ6DGXBM2BZBaFHtx0y3saYAW4G61nDJ
HKjmKFcdwuprTqC++VtFxWDPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU9QHmW6W2
W08zF9ajXY7RnqXNRq4wHwYDVR0jBBgwFoAUGzaDUllEd0OIhTCQ0QBbtRVSJG0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxOUNDLzk5MTRCOEU0REEx
RjExRjBBQjgyMEZGNzg0RDM2NDFEL0d6YURVbGxFZDBPSWhUQ1EwUUJidFJWU0pH
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvR3phRFVsbEVkME9JaFRDUTBRQmJ0UlZTSkcwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx
OUNDLzk5MTRCOEU0REExRjExRjBBQjgyMEZGNzg0RDM2NDFEL0d6YURVbGxFZDBP
SWhUQ1EwUUJidFJWU0pHMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAwKP6nv4JQnGl4QFal3Zk+bofgnl4u70t79/m3IFo8WNslwc4TSjNwv94VY3L0
O/2HDnOFSlDjItEJIvVNkVePyv7Wr7x6SOBAD/+TwV7dobA1K4H+JZ0SNIOQLHAP
bo8ZJlTNjZ4/RjFVJM/NkqCGLn7cW9dTdQ1QLccG1uRwz0Vwik227CDgl/KUimNB
f/31YcQNVX8Cw+iTbDm8fvFFf1cRiSEcqiPIuycEfqriSvaCxk/mid9DndPbIjOI
7Ac1NBpHiSnYHqGEYGS008MPG/eMdS7dnyl5ajXqIGInbAyg/7Pe4czv8Qvb5940
6itHt7YdUQEVCpreukaCSQDv
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:21:02 2026 by rpki-client